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DETAILED ACTION 



Specification 



1 . The lengthy specification has not been checked to the extent necessary to 
determine the presence of all possible minor errors. Applicant's cooperation is 
requested in correcting any errors of which applicant may become aware in the 
specification. 



2. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent In the United 
states. 

3. The Office would like to notify Applicant that two copies of the Cisco Systems, 
Inc. reference "Using Threshold Manager" have been provided. One is a web page 
printout and the other is a printout of a PDF copy linked to from the web page. The 
undated PDF copy has been cited because the figures are illegible on the printed copy 
of the web page. The figures are clearer on the web page itself, but are illegible when 
printed. Since no date is printed on the PDF file, a screen printout from Adobe Acrobat 
Reader has been appended to the document for verification of the file creation date of 
1/7/98. 

4. Claims 1,2,3,5,7,8,11,12,14-19,22-25, and 28 are rejected under 35 
U.S.C. 102(b) as being anticipated by Cisco Systems Inc. 



Claim Rejections - 35 USC § 102 
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5. With regard to claim 1 , Cisco Systems Inc., hereafter referred to as Cisco, 
discloses a method of managing a telecommunications network, comprising: receiving a 
threshold expression from a user through a user interface (Page, 2-18, Fig 2-5); and 
implementing the threshold expression within a network device (enforce to the agent) 
while the network device is operational (Page 2-17, Lines 7-14). 

6. With regard to claim 2, Cisco further discloses that receiving a threshold 
expression comprises receiving a user selection of an existing threshold expression 
(predefined policies) (Page 2-17, Lines 1-3). 

7. With regard to claim 3, Cisco further discloses that receiving a threshold 
expression comprises receiving a new threshold expression from the user (Page 2-17, 
Lines 5-14). 

8. With regard to claim 5, Cisco further discloses: receiving a resource selection 
from the user through the user interface (select the policy to configure)(Fig 2-4); and 
displaying a threshold dialog box (create threshold policy box) (Fig 2-5), wherein the 
threshold expression in received through the threshold dialog box (Page 2-17, Lines 4- 



9. With regard to claim 7, Cisco further discloses displaying a default threshold 
expression to the user through the threshold dialog box (Page 2-19, Lines 10-11 and 



10. With regard to claim 8, Cisco further discloses that updating the threshold 
expression within a network device while the network device is operational comprises: 
and updating thresholding code executing (agent) within the network device with the 



14). 



19-20). 
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data written into the at least one table (enforce the policy) (Page 2-16, Lines 19-21). 
Cisco does not specifically disclose writing data from the threshold dialog box into at 
least one table in a configuration database within the network device. However, since 
the network device must keep track of the threshold policies that pertain to it, the data 
from the threshold must be written to a configuration database of some sort, and is 
therefore inherent in the system disclosed by Cisco. 

1 1 . With regard to claim 1 1 , Cisco discloses a method of managing a 
telecommunications network, comprising: receiving a new threshold expression from a 
user through a user interface (Page 2-17, Lines 5-14); and implementing the new 
threshold expression within a network device while the network device is operational 
(Page 2-17, Lines 7-14). 

12. With regard to claim 12, Cisco discloses a method of managing a 
telecommunications network, comprising: displaying a plurality of existing threshold 
expressions through a user interface (Fig 2-4); receiving a user selection of one of the 
existing threshold expressions; and implementing the selected existing threshold 
expression within a network device while the network device is operational (Page 2-16, 
Lines 1-5). 

13. With regard to claim 14, Cisco discloses a method of managing a 
telecommunications network, comprising: assigning a unique identifier to each of a 
plurality of resources in a network device (MIB variable name); receiving a resource 
selection from a user through a user interface (enter variable name in dialog box); and 
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establishing a threshold evaluation for the selected resource using the unique identifier 
assigned to the selected resource (Page 2-18, Lines 5-7, and Fig 2-5). 

14. With regard to claim 15, Cisco further discloses receiving a resource selection 
and a resource attribute selection from the user through a threshold dialog box (Create 
Threshold Policy box) (Fig 2-5). 

15. With regard to claim 16, Cisco further discloses that the threshold evaluation is 
established within the network device and while the network device is operational (Page 
2-16, Lines 1-5). 

16. With regard to claim 17, Cisco further discloses receiving a threshold expression 
from the user through the threshold dialog box (Page, 2-18, Fig 2-5); writing data, 
including the unique identifier assigned to the selected resource and the threshold 
expression, from the threshold dialog box into at least one table in a configuration 
database within the network device (); and updating thresholding code executing within 
the network device (agent) with the data written into the at least one table (enforce the 
policy)(Page 2-16, Lines 19-21). Cisco does not specifically disclose writing data, 
including the unique identifier assigned to the selected resource and the threshold 
expression, from the threshold dialog box into at least one table in a configuration 
database within the network device. However, since the network device must keep track 
of the threshold policies that pertain to it as well as the unique identifier (variable) to be 
monitored, the data from the threshold must be written to a configuration database of 
some sort, and is therefore inherent in the system disclosed by Cisco, 
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17. With regard to claim 18, Cisco further discloses that receiving a threshold 
expression from the user through the threshold dialog box comprises: receiving a user 
selection of an existing threshold expression (default threshold value) (Page 2-19, Lines 
10-11). 

18. With regard to claim 19, Cisco further discloses that receiving a threshold 
expression from the user through the threshold dialog box comprises: receiving a new 
threshold expression from the user (Page 2-17, Lines 5-14). 

19. With regard to claim 22, Cisco discloses a method of managing a 
telecommunications network, comprising: detecting a threshold event in an application 
within a network device (threshold crossing), and responding to the threshold event in 
accordance with an action defined within the thresholding code (generate event) (Page 
2-2, Lines 4-5). Cisco does not specifically disclose notifying thresholding code of the 
threshold event. However, this step is inherent since the thresholding code must be 
notified of the threshold event in order to respond to it. 

20. With regard to claim 23, Cisco further discloses that detecting a threshold event 
in an application within a network device comprises: monitoring a resource attribute 
continuously (user specified interval); and comparing the resource attribute against a 
threshold expression (rising/falling thresholds) provided to the application by the 
thresholding code (Page 2-12, Lines 10-11). 

21 . With regard to claim 24, Cisco further discloses that responding to the threshold 
event in accordance with an action defined within the thresholding code comprises: 
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notifying a network manager of the tlireshold event (send SNMP tramp to a 
management station) (Page 2-13, Lines 15-22). 

22. With regard to claim 25, Cisco further discloses that notifying a network manager 
of the threshold event comprises: sending a notice to network management system 
software external to the network (Page 2-13, Lines 15-22). 

23. With regard to claim 28, Cisco further discloses that responding to the threshold 
event in accordance with an action defined within the thresholding code comprises: 
logging the threshold event (Page 2-13, Lines 15-22). 

24. Claim 13 is rejected under 35 U.S.C. 102(b) as being anticipated by Ordanic et 
al. (US 5,751,964). 

25. With regard to claim 13, Ordanic et al. disclose a method of managing a 
telecommunications network, comprising: implementing a plurality of cascaded 
threshold expressions within a network device (Col 6, Lines 14-26). 

Claim Rejections - 35 USC § 103 

26. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject nnatter sought to be patented and 
the prior art are such that the subject nnatter as a whole would have been obvious at the tinne the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

27. Claim 4 is rejected under 35 U.S.C. 103(a) as being unpatentable over Cisco 
Systems, Inc. in view of Ordanic et al. (US 5,751 ,964). 
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28. With regard to claim 4, while the system disclosed by Cisco shows substantial 
features of the claimed invention (discussed above), it fails to disclose that the threshold 
expression includes a plurality of cascaded threshold expressions. 

Ordanic et al. disclose a system for determining thresholds in network 
management, and teach the use of cascaded threshold expressions as a means for 
establishing the severity of a threshold event (Col 6, Lines 14-26). For example, a 
network manager could set a threshold level for delay on a link representing a moderate 
delay, and an additional threshold representing a severe delay to be checked only when 
the first threshold is exceeded. The manager could choose to have the system log 
whenever the first threshold is exceeded, but may choose to be immediately notified 
when a sever delay occurs. This is advantageous because it allows the network 
manager to monitor when less severe events occur, while only being notified of severe 
events occur. 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to support cascaded threshold expressions as a means for 
the network manager to establish the severity of a threshold event. This would allow 
different actions to be performed depending on the severity of the threshold event. 

29. Claims 6,10 and 21 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Cisco Systems, Inc. 
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30. With regard to claim 6, while the system disclosed by Cisco shows substantial 
features of the claimed invention (discussed above), it fails to disclose displaying a 
plurality of existing threshold expressions to the user through the threshold dialog box. 

Cisco discloses displaying a plurality of predetermined threshold policies (Page 
2-17, Lines 1-3) as well as providing a default threshold value (Page 2-19, Lines 10-11), 
but does not provide a plurality of threshold expressions within the threshold dialog box. 
However, it would be advantageous to provide a plurality of expressions from.within the 
threshold dialog box since it would allow the user access to a plurality of commonly 
used default settings. This would allow the user to choose from predefined threshold 
levels such as warning, critical, or severe without having to manually specify the 
threshold level. 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to display a plurality of existing threshold expressions to 
the user through the threshold dialog box as a means to choose from predetermined 
setting such as warning, critical, and severe threshold levels without requiring a 
threshold to be manually entered. This simplifies the setup of the system for users since 
manual values do not need to be known by the user. 

31 . With regard to claims 10 and 21 , while the system disclosed by Cisco shows 
substantial features of the claimed invention (discussed above), it fails to specifically 
disclose that updating thresholding code executing within the network device with the 
data written in at least one table comprises: sending an active query notice to each 
application including the thresholding code and corresponding to the selected resource. 
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Cisco discloses that threshold policies are enforced to the agents in order to 
activate thenn, but remains silent on the specific process used to enforce the policies 
(Page 2-16, Lines 19-21). However, it is clear that any existing thresholds currently 
monitored by the device should be changed in the event that the user enforces a policy. 
It would be advantageous to send an active query to each application including the 
thresholding code and corresponding to the selected resource in order to ensure that 
the new settings are implemented immediately. By actively notifying the devices, they 
do not have to periodically check to see if any settings have been changed, and 
changes are immediately implemented. 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to update the thresholding code executing within the 
network device with the data written into the at least on table by sending an active query 
notice to each application including the thresholding code and corresponding ot the 
selected resource. This ensures that the threshold settings of a newly enforced policy 
are immediately implemented in the device, preventing accidental threshold events or 
missing desired events. 

32. Claims 9 and 20 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Cisco Systems, Inc. in view of Microsoft Corporation. 

33. With regard to claims 9 and 20, while the system disclosed by Cisco shows 
substantial features of the claimed invention (discussed above), it fails to specifically 
disclose that writing data from the threshold dialog box into at least one table in a 
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configuration database within the network device comprises: sending the data from the 
threshold dialog box through a network management system (NMS) client to an NMS 
server; and writing the data into the at least one table through the NMS server. 

Cisco discloses enforcing a policy on a device in order to activate a threshold 
expression, but remains silent on the specific means of enforcing the policy. Cisco also 
discloses storing saved policies for later usage (Page 2-22, Line 9 to Page 2-23, Line 
6), but fails to disclose where the policies are saved. 

Microsoft discloses that SNMP agents can be configured to accept SNMP 
packets only from specific hosts, increasing security of the devices (Page 1 , Lines 22- 
26). Therefore, it would have been advantageous to send the data to the device and 
write into the configuration table by sending it to an NMS server first. By communicating 
through the NMS server, the network administrator can allow settings of network 
devices to be changed without allowing direct access to the devices. This can help 
prevent malicious users from damaging the network since security measures can be 
implemented on the server to help prevent attacks on the network, and the devices can 
be set up so they will only respond to threshold policies sent by the NMS server. 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to write data from the threshold dialog box into at least one 
table in a configuration database within the network device by sending the data from the 
threshold dialog box through a network management system (NMS) client to an NMS 
server; and writing the data into the at least one table through the NMS server. This 
would allow the devices to be configured so they respond only to requests from the 
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NMS server, increasing security of the network since additional security measures could 
be implemented on the NMS server to help deter malicious users. 

34. Claims 26 and 27 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Cisco Systems Inc. in view of Fowler et al. (US 6,714,977). 

35. With regard to claims 26 and 27, while the system disclosed by Cisco shows 
substantial features of the claimed invention (discussed above), it fails to disclose that 
notifying a network manager of the threshold event comprises: sending an electronic 
mail message or a page to the network manager. 

Fowler et al. disclose a method for monitoring a computer network and sending a 
Message to the network manager via email or pager when an out-of-limit condition 
occurs (Col 4, Lines 32-36 and Col 17, Lines 16-28). This is advantageous because the 
network manager does not need to be physically located at a network management 
station in order to be notified that a threshold has been exceeded. The network 
manager can be immediately notified via email at any computer with email access or via 
a pager at any location where the pager can receive a signal. This allows the network 
manager to immediately respond to serious problems in the network, rather than having 
to wait until returning to the network management station that receives the message to 
learn of the problem. 

Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to notify the network manager of a threshold event by 
sending an electronic mail message and/or a page to the network manager. This allows 
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the network manager to be notified of problems in tlie network witliout being physically 
located at a network management station to receive the notification. 

36. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Aaron Strange whose telephone number is 703-305- 
8878. The examiner can normally be reached on M-F 8:30-5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Glen Burgess can be reached on 703-305-4792. The fax phone number for 
the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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